CVE-2025-47725

Delta Electronics CNCSoft lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

Score

CVSS 4.0 7.3 High

Status

Analyzed - 759f5e80-c8e1-4224-bead-956d7b33c98b

Published

2025-06-04

Last modified

2025-06-04

Weaknesses

CWE-787

Affected products

• Cncsoft (Delta Electronics)
• Cncsoft (Deltaww)

References

• https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00006_CNCSoft%20-%20Out-of-bounds%20Write.pdf